chore(deps): bump the gha-updates group across 1 directory with 3 updates (#808)

Author: dependabot[bot]

.github/workflows/ci-benchmark.yml

@@ -26,7 +26,7 @@ jobs:
       - uses: actions/checkout@v6
       - name: Extract make args
         id: extract
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const fullComment = context.payload.comment.body;
@@ -36,7 +36,7 @@ jobs:
 
       - name: Reply to PR comment and save ID
         id: comment
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const fs = require('fs');
@@ -84,7 +84,7 @@ jobs:
           LIGHTNING_API_KEY: ${{ secrets.LIGHTNING_API_KEY }}
 
       - name: Update the same comment
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         env:
           COMMENT_ID: ${{ steps.comment.outputs.comment_id }}
           USERNAME: ${{ steps.comment.outputs.username }}

.github/workflows/ci-testing.yml

@@ -78,7 +78,7 @@ jobs:
           coverage xml
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v6
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           file: ./coverage.xml

.github/workflows/release-pypi.yml

@@ -45,7 +45,7 @@ jobs:
 
       - name: Publish distribution 📦 to PyPI
         if: startsWith(github.event.ref, 'refs/tags') || github.event_name == 'release'
-        uses: pypa/gh-action-pypi-publish@v1.13.0
+        uses: pypa/gh-action-pypi-publish@v1.14.0
         with:
           user: __token__
           password: ${{ secrets.pypi_password }}